diff --git a/packages/mkyara/PKGBUILD b/packages/mkyara/PKGBUILD
index 1c1a954c961..84f816e0ee2 100644
--- a/packages/mkyara/PKGBUILD
+++ b/packages/mkyara/PKGBUILD
@@ -4,13 +4,13 @@
 pkgname=mkyara
 _pkgname=mkYARA
 pkgver=3.8147f91
-pkgrel=5
+pkgrel=6
 pkgdesc='Tool to generate YARA rules based on binary code.'
 groups=('blackarch' 'blackarch-misc')
 arch=('any')
 url='https://github.com/fox-it/mkYARA'
 license=('GPL3')
-depends=('python' 'python-capstone' 'python-yara' 'python-argparse')
+depends=('python' 'python-capstone' 'python-yara-python-dex' 'python-argparse')
 makedepends=('git' 'python-setuptools')
 source=("git+https://github.com/fox-it/$_pkgname.git")
 sha512sums=('SKIP')
diff --git a/packages/oledump/PKGBUILD b/packages/oledump/PKGBUILD
index 08ff09a9450..cd83976cbf8 100644
--- a/packages/oledump/PKGBUILD
+++ b/packages/oledump/PKGBUILD
@@ -3,13 +3,13 @@
 
 pkgname=oledump
 pkgver=0.0.77
-pkgrel=1
+pkgrel=2
 groups=('blackarch' 'blackarch-binary' 'blackarch-malware')
 pkgdesc='Analyze OLE files (Compound File Binary Format). These files contain streams of data. This tool allows you to analyze these streams.'
 arch=('any')
 url='http://blog.didierstevens.com/programs/oledump-py/'
 license=('custom:unknown')
-depends=('python' 'python-lxml' 'python-yara' 'python-olefile')
+depends=('python' 'python-lxml' 'python-yara-python-dex' 'python-olefile')
 source=("https://didierstevens.com/files/software/${pkgname}_V${pkgver//./_}.zip")
 sha512sums=('f53e849db1dc4a64a21cf25a3ef14523333c259670c7316d7f1f68a07201b847a9ccfaa4423838f574c1a3889437f7d91fc494866c7a307efa37fc782477e3c5')
 
diff --git a/packages/peframe/PKGBUILD b/packages/peframe/PKGBUILD
index ea9f7d8c822..4952ae1fdd0 100644
--- a/packages/peframe/PKGBUILD
+++ b/packages/peframe/PKGBUILD
@@ -3,7 +3,7 @@
 
 pkgname=peframe
 pkgver=135.70683b6
-pkgrel=4
+pkgrel=5
 groups=('blackarch' 'blackarch-malware' 'blackarch-binary'
         'blackarch-reversing')
 pkgdesc='Tool to perform static analysis on (portable executable) malware.'
@@ -11,8 +11,8 @@ arch=('any')
 url='https://github.com/guelfoweb/peframe'
 license=('custom:unknown')
 depends=('python' 'python-pefile' 'python-python-magic' 'python-oletools'
-         'python-yara' 'python-m2crypto' 'python-virustotal-api' 'python-magic'
-         'python-msoffcrypto-tool' 'python-parameterized')
+         'python-yara-python-dex' 'python-m2crypto' 'python-virustotal-api'
+         'python-magic' 'python-msoffcrypto-tool' 'python-parameterized')
 makedepends=('git' 'python-setuptools')
 source=("git+https://github.com/guelfoweb/$pkgname.git")
 sha512sums=('SKIP')
diff --git a/packages/pepper/PKGBUILD b/packages/pepper/PKGBUILD
index 2e431c05f43..f6898907bed 100644
--- a/packages/pepper/PKGBUILD
+++ b/packages/pepper/PKGBUILD
@@ -3,14 +3,14 @@
 
 pkgname=pepper
 pkgver=18.9dfcade
-pkgrel=3
+pkgrel=4
 pkgdesc='An open source script to perform malware static analysis on Portable Executable.'
 arch=('any')
 groups=('blackarch' 'blackarch-malware' 'blackarch-reversing'
         'blackarch-binary')
 url='https://github.com/Th3Hurrican3/PEpper'
 license=('custom:unknown')
-depends=('python' 'python-pefile' 'python-yara' 'python-requests'
+depends=('python' 'python-pefile' 'python-yara-python-dex' 'python-requests'
          'python-magic' 'lief' 'yara')
 makedepends=('git')
 source=("$pkgname::git+https://github.com/Th3Hurrican3/PEpper.git")
diff --git a/packages/python-plaso/PKGBUILD b/packages/python-plaso/PKGBUILD
index e41279ae5cb..b80c844f17c 100644
--- a/packages/python-plaso/PKGBUILD
+++ b/packages/python-plaso/PKGBUILD
@@ -4,7 +4,7 @@
 pkgname=python-plaso
 _pkgname=plaso
 pkgver=20201007
-pkgrel=4
+pkgrel=5
 pkgdesc='Super timeline all the things.'
 arch=('x86_64' 'aarch64')
 url='https://github.com/log2timeline/plaso'
@@ -18,16 +18,15 @@ depends=('python' 'python-artifacts' 'python-bencode.py' 'python-biplist'
          'python-libfsapfs-python' 'python-libfsntfs-python'
          'python-libfvde-python' 'python-libfwnt-python' 'python-libfwsi-python'
          'python-liblnk-python' 'python-libmsiecf-python' 'python-luksde-python'
-         'python-libolecf-python' 'python-libqcow-python'
-         'python-libregf-python' 'python-libscca-python'
-         'python-libsigscan-python' 'python-libsmdev-python'
+         'python-libolecf-python' 'python-libqcow-python' 'python-dateutil'
+         'python-libregf-python' 'python-libscca-python' 'python-pyparsing'
+         'python-libsigscan-python' 'python-libsmdev-python' 'python-pyaml'
          'python-libsmraw-python' 'python-libvhdi-python' 'python-defusedxml'
          'python-libvmdk-python' 'python-libvshadow-python'
          'python-libvslvm-python' 'python-lz4' 'python-pefile' 'python-pip'
-         'python-psutil' 'python-pycryptodome' 'python-pyparsing'
-         'python-dateutil' 'python-pytsk3' 'python-pytz' 'python-pyaml'
+         'python-psutil' 'python-pycryptodome' 'python-pytsk3' 'python-pytz'
          'python-pyzmq' 'python-requests' 'python-six' 'python-urllib3'
-         'python-xlsxwriter' 'python-yara' 'python-cryptography')
+         'python-xlsxwriter' 'python-yara-python-dex' 'python-cryptography')
 makedepends=('python-setuptools')
 conflicts=('python2-plaso')
 source=("https://files.pythonhosted.org/packages/source/${_pkgname::1}/$_pkgname/$_pkgname-$pkgver.tar.gz")
diff --git a/packages/stacs/PKGBUILD b/packages/stacs/PKGBUILD
index 9237d9dae99..512d3f1a35a 100644
--- a/packages/stacs/PKGBUILD
+++ b/packages/stacs/PKGBUILD
@@ -3,13 +3,13 @@
 
 pkgname=stacs
 pkgver=0.5.1.r0.g11f3503
-pkgrel=2
+pkgrel=3
 pkgdesc='Static Token And Credential Scanner.'
 arch=('x86_64' 'aarch64')
 groups=('blackarch' 'blackarch-scanner' 'blackarch-misc')
 url='https://github.com/stacscan/stacs'
-license=('BSD')
-depends=('python' 'python-click' 'python-pydantic' 'python-yara'
+license=('BSD-3-Clause')
+depends=('python' 'python-click' 'python-pydantic' 'python-yara-python-dex'
          'python-libarchive' 'pybind11')
 makedepends=('git' 'python-setuptools' 'python-pip')
 source=("git+https://github.com/stacscan/$pkgname.git")
diff --git a/packages/torcrawl/PKGBUILD b/packages/torcrawl/PKGBUILD
index 7f300d548b7..fce51091097 100644
--- a/packages/torcrawl/PKGBUILD
+++ b/packages/torcrawl/PKGBUILD
@@ -3,14 +3,14 @@
 
 pkgname=torcrawl
 pkgver=135.7cf7a19
-pkgrel=1
+pkgrel=2
 pkgdesc='Crawl and extract (regular or onion) webpages through TOR network.'
 arch=('any')
 groups=('blackarch' 'blackarch-webapp' 'blackarch-scanner')
 url='https://github.com/MikeMeliz/TorCrawl.py'
-license=('GPL')
+license=('GPL3')
 depends=('python' 'python-argparse' 'python-beautifulsoup4' 'python-requests'
-         'python-socks' 'python-urllib3' 'python-yara' 'tor')
+         'python-socks' 'python-urllib3' 'python-yara-python-dex' 'tor')
 makedepends=('git')
 source=("$pkgname::git+https://github.com/MikeMeliz/TorCrawl.py.git")
 sha512sums=('SKIP')
diff --git a/packages/yeti/PKGBUILD b/packages/yeti/PKGBUILD
index deaf0c8254a..f229fec6e24 100644
--- a/packages/yeti/PKGBUILD
+++ b/packages/yeti/PKGBUILD
@@ -3,7 +3,7 @@
 
 pkgname=yeti
 pkgver=3371.0b7b41d4
-pkgrel=1
+pkgrel=2
 pkgdesc='A platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository.'
 groups=('blackarch' 'blackarch-defensive' 'blackarch-recon')
 arch=('any')
@@ -20,17 +20,16 @@ depends=('python' 'python-chardet' 'python-click' 'python-click-plugins'
          'python-kombu' 'python-libmagic' 'python-lxml' 'python-maclookup'
          'python-markupsafe' 'python-maxminddb' 'python-mongoengine'
          'python-packaging' 'python-pdfkit' 'python-psutil' 'python-celery'
-         'python-pdfminer' 'python-pygments' 'python-pymongo'
-         'python-pyparsing' 'python-pysocks' 'python-dateutil'
-         'python-shodan' 'python-magic' 'python-readability-lxml'
+         'python-pdfminer' 'python-pygments' 'python-pymongo' 'redis' 'mogodb'
+         'python-pyparsing' 'python-pysocks' 'python-dateutil' 'wkhtmltopdf'
+         'python-shodan' 'python-magic' 'python-readability-lxml' 'libxml2'
          'python-redis' 'python-requests-file' 'python-simplejson'
          'python-six' 'python-sphinx' 'python-snowballstemmer'
          'python-urllib3' 'python-werkzeug' 'python-sphinxcontrib-httpdomain'
          'python-sphinxcontrib-websupport' 'python-sphinx_rtd_theme'
          'python-tldextract' 'python-typing' 'python-urlnorm' 'python-vine'
-         'python-wtforms' 'python-xlsxwriter' 'python-yara' 'mongodb' 'redis'
-         'python-url-normalize' 'python-pandas' 'python-flask-api' 'libxslt'
-         'libxml2' 'wkhtmltopdf')
+         'python-wtforms' 'python-xlsxwriter' 'python-yara-python-dex'
+         'python-url-normalize' 'python-pandas' 'python-flask-api' 'libxslt')
 makedepends=('git' 'yarn')
 source=("git+https://github.com/yeti-platform/$pkgname.git")
 sha512sums=('SKIP')